Static task
static1
Behavioral task
behavioral1
Sample
48c887dffb14cf81a217003f7ac7d188_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
48c887dffb14cf81a217003f7ac7d188_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
48c887dffb14cf81a217003f7ac7d188_JaffaCakes118
-
Size
100KB
-
MD5
48c887dffb14cf81a217003f7ac7d188
-
SHA1
96d7471a991c4042049e45e2702b9a70a18225c7
-
SHA256
2cc1fc7540494db8ebf6af28e740295234c5057bc37bb3df95157eefe65b6988
-
SHA512
83d79d1932106c89de554fba53330f56db4fd5d8250ad4487a00a0eb10ffbb276711f4fcd046c339f6f1bd09211e09436ee8db89d596457fcc66cab3473e09fe
-
SSDEEP
1536:6YghrKIe6St21EcvmM9a+IqhculN5I6UR5Wwmq5H7Dhy2t6r:6YkrKITa4N5HcE5IlRuq5HA26
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 48c887dffb14cf81a217003f7ac7d188_JaffaCakes118
Files
-
48c887dffb14cf81a217003f7ac7d188_JaffaCakes118.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ